$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa File: f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa (raw, json) Hash identifier: PieQ4+zCXf4alEQ9BhJK3xIzsOz0jSllwgUl0qgK6Oo= Subject key identifier: 82:1A:0C:84:89:CB:76:08:04:AC:10:CC:DD:F4:45:D4:34:06:D6:7B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7BF13B2C6F5A8DA9F54699638B87AECACD521E29 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa Signing time: Tue 21 Oct 2025 13:00:10 +0000 ROA not before: Tue 21 Oct 2025 13:00:10 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e000::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f1:3b:2c:6f:5a:8d:a9:f5:46:99:63:8b:87:ae:ca:cd:52:1e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 21 13:00:10 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=0ea852bacc72a1272494a36a3d88fc47c810e6fa7a54f55e098b35d5962779b2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:77:55:6e:e2:bf:9e:13:1e:f0:0b:fe:63:52: de:81:eb:5c:8e:b5:a2:cc:eb:97:33:bf:de:6d:6d: 1f:71:93:bd:1b:5f:6c:4f:26:8e:4d:83:81:d8:e1: 76:44:e6:eb:6b:60:4f:75:1f:63:8c:1a:f8:67:dd: af:01:75:f7:ee:5c:ca:2b:95:20:94:5a:cb:f5:7e: 00:64:23:26:de:89:7f:78:e7:4f:db:42:43:54:29: 66:5d:19:12:18:2a:f8:92:5c:72:63:94:79:3c:22: 54:e2:23:29:a1:a8:96:c5:cb:52:4b:fe:b0:ed:e5: 2f:b5:2b:6e:dd:22:ba:b4:84:1b:7b:39:66:96:58: 2b:04:eb:3f:81:bb:1d:6a:f3:29:cc:22:99:5a:ab: 64:7e:74:27:87:24:9f:9a:d4:1b:e1:10:65:2a:c4: db:93:25:7e:49:c8:7f:d1:76:2b:56:1d:61:a6:21: 12:05:1b:06:9f:92:a1:e2:03:51:62:2a:3c:a0:f8: 10:7c:fd:69:a3:65:0e:cb:e9:70:d9:9b:47:e7:a3: e0:4f:35:72:e9:0d:dd:e4:b1:9b:31:9d:1b:b9:d7: 88:0b:31:1a:4a:bd:33:27:fe:57:71:b1:46:17:3f: c8:f6:02:de:81:e3:0a:9f:b8:4d:0c:22:b8:48:8b: 49:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1A:0C:84:89:CB:76:08:04:AC:10:CC:DD:F4:45:D4:34:06:D6:7B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e000::/42 Signature Algorithm: sha256WithRSAEncryption 16:ca:f2:64:c8:26:6a:ca:f7:be:3d:52:b2:83:52:0c:9a:82: 24:77:cc:1c:b3:7f:55:88:d2:65:7c:87:b3:23:c1:70:73:d8: fb:e3:f3:99:60:17:bc:ba:1e:2b:15:26:c3:82:6a:26:e6:47: 1f:f3:c1:05:d1:de:58:8d:3f:0a:6d:24:ac:19:a7:49:bd:1b: 52:3c:1b:b5:ea:57:5b:5e:30:71:de:ba:c5:1b:a9:bd:ed:ee: b3:c0:25:d8:20:34:0e:fa:82:eb:d5:3d:ff:f4:13:b1:67:79: f6:2b:b1:71:16:3a:21:dc:a6:83:d2:7c:11:43:44:40:18:15: ae:69:75:47:8a:99:11:de:5a:31:82:68:0e:b1:a7:48:a9:44: fc:16:7a:70:0f:f1:09:c8:37:46:b9:74:1d:e9:97:47:b2:81: 37:bb:ac:d1:a7:3d:a2:23:7f:52:10:58:7d:61:48:d7:60:cf: 93:d9:3b:4e:6a:16:6f:07:05:99:ba:53:5a:dc:8e:ba:b7:ee: 72:34:93:af:a8:c0:44:cd:6a:f5:a6:71:52:40:11:14:98:1a: cd:d6:f5:ef:43:9e:8f:c4:40:30:29:b9:31:b2:21:fd:33:d5: 55:cf:24:81:7c:a7:62:b6:ad:dd:05:9a:06:c4:fa:34:d0:cc: 42:26:99:c7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUe/E7LG9ajan1Rplji4euys1SHikwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIxMTMwMDEwWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZWE4NTJiYWNjNzJhMTI3MjQ5NGEzNmEzZDg4ZmM0N2M4 MTBlNmZhN2E1NGY1NWUwOThiMzVkNTk2Mjc3OWIyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDd1Vu4r+eEx7wC/5jUt6B61yOtaLM65czv95tbR9xk70b X2xPJo5Ng4HY4XZE5utrYE91H2OMGvhn3a8BdffuXMorlSCUWsv1fgBkIybeiX94 50/bQkNUKWZdGRIYKviSXHJjlHk8IlTiIymhqJbFy1JL/rDt5S+1K27dIrq0hBt7 OWaWWCsE6z+Bux1q8ynMIplaq2R+dCeHJJ+a1BvhEGUqxNuTJX5JyH/RditWHWGm IRIFGwafkqHiA1FiKjyg+BB8/WmjZQ7L6XDZm0fno+BPNXLpDd3ksZsxnRu514gL MRpKvTMn/ldxsUYXP8j2At6B4wqfuE0MIrhIi0l1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUghoMhInLdggErBDM3fRF1DQG1nswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y1ZDE3MjdhLWViMmYtNGFlMC04ODFlLWM4ZmRjMzQ0Yjk1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD74AAwDQYJKoZIhvcNAQELBQADggEBABbK8mTIJmrK9749UrKDUgya giR3zByzf1WI0mV8h7MjwXBz2Pvj85lgF7y6HisVJsOCaibmRx/zwQXR3liNPwpt JKwZp0m9G1I8G7XqV1teMHHeusUbqb3t7rPAJdggNA76guvVPf/0E7FnefYrsXEW OiHcpoPSfBFDREAYFa5pdUeKmRHeWjGCaA6xp0ipRPwWenAP8QnIN0a5dB3pl0ey gTe7rNGnPaIjf1IQWH1hSNdgz5PZO05qFm8HBZm6U1rcjrq37nI0k6+owETNavWm cVJAERSYGs3W9e9Dno/EQDApuTGyIf0z1VXPJIF8p2K2rd0FmgbE+jTQzEImmcc= -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:58 2025 by rpki-client